CVE-2017-6628: cisco wide_area_application_services Resource Management Errors

Vulnerability summary

CVE-2017-6628 is a medium (CVSS 6.8) Resource Management Errors vulnerability in cisco wide_area_application_services. EPSS estimates a 1.68% chance of exploitation in the next 30 days, higher than 76.7% of scored vulnerabilities.

Timeline

1. 03-05-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition where the WAN optimization could stop functioning while the process restarts. The vulnerability is due to a Secure Sockets Layer/Transport Layer Security (SSL/TLS) alert being incorrectly handled when in a specific SSL/TLS connection state. An attacker could exploit this vulnerability by establishing a SMART-SSL connection through the targeted device. The attacker would then send a crafted stream of SSL/TLS traffic. An exploit could allow the attacker to cause a DoS condition where WAN optimization could stop processing traffic for a short period of time. Cisco Bug IDs: CSCvb71133.

• CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.
• CWE-755Improper Handling of Exceptional ConditionsThe product does not handle or incorrectly handles an exceptional condition.